2466 matches found
CVE-2001-0889
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0889
Exim vulnerable to remote command execution when redirecting to a pipe: Exim 3.22 and earlier fail to properly verify the local part of the address, allowing shell metacharacters to run arbitrary commands. Public details from CVE-2001-0889 describe impact as remote command execution with the Exim...
CVE-2001-0889: Undefined Security Weakness
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2002-0274
Exim 3.34 and earlier may allow local users to gain privileges via a buffer overflow in long -C configuration file and other command line arguments...
CVE-2001-0690
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
CVE-2001-0690
The Exim mail transfer agent (versions 3.22-10 in Red Hat, 3.12 in Debian, and 3.16 in Conectiva) contains a format string vulnerability in its syntax checking code. When the batched SMTP mode (using the -bS switch) is active and syntax checking is enabled, an attacker can execute arbitrary code ...
CVE-2001-0690: Undefined Security Weakness
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
[SECURITY] [DSA 097-1] New versions of Exim fix uncontrolled program execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 097-1 [email protected] http://www.debian.org/security/ Martin Schulze January 3rd, 2002 - -------------------------------------------------------------------------- Package : exim...
Выполнение команд в exim (code execution)
При использовании правил перенаправляющих почту без проверки локальной части не контролируются специальные символы, что может привести к перенаправлению песьма во внешнее приложение...
[Exim] Potential security problem
From: Philip Hazel [email protected] To: [email protected], [email protected] Subject: Exim Potential security problem X-BeenThere: [email protected] Date: Wed, 19 Dec 2001 14:35:41 +0000 GMT Important. Please read. Amongst other things, Exim 3.34 and Exim 3.952 alpha for Exim 4, which ...
CVE-2001-0889
Exim 3.22 and earlier, in some configurations, does not properly verify the local part of an address when redirecting the address to a pipe, which could allow remote attackers to execute arbitrary commands via shell metacharacters...
CVE-2001-0690
Format string vulnerability in exim 3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers...
[SECURITY] [DSA-058-1] exim printf format attack
Package : exim Problem type : remote printf format attack Debian-specific: no Megyer Laszlo found a printf format bug in the exim mail transfer agent. The code that checks the header syntax of an email logs an error without protecting itself against printf format attacks. This problem has been...
lil' exim format bug
Hi BugTrackers Just a little bug to tell: THE BUG ------- accept.c, line 2506: else if smtpreply != NULL moansmtpbatchNULL, smtpreply; while moansmtpbatch is like this: moansmtpbatchchar cmdbuffer, char format, ... So when smtpreply contains format strings, it get transformed by moansmtpbatch. Wh...
Ошибка форматной строки в exim
Ошибка форматной строки при включеной опции headerschecksyntax...
Exim 3.x - Format String
Exim 3.x - Format String source: https://www.securityfocus.com/bid/2828/info Exim is a free, open-source Mail Transfer Agent for Unix systems. Exim is vulnerable to a locally exploitable format string attack which may compromise root access. The vulnerability exists only when the 'syntax checking...
Exim 3.x - Format String
source: https://www.securityfocus.com/bid/2828/info Exim is a free, open-source Mail Transfer Agent for Unix systems. Exim is vulnerable to a locally exploitable format string attack which may compromise root access. The vulnerability exists only when the 'syntax checking' mode is turned on, whic...
CVE-1999-0971
Buffer overflow in Exim allows local users to gain root privileges via a long :include: option in a .forward file...
CVE-1999-0971
CVE-1999-0971 describes a buffer overflow in the Exim mail transfer agent that allows local users to gain root privileges through a long :include: option in a .forward file. The affected component is Exim; the underlying cause is a buffer overflow triggered by the :include: option. The public des...